feat(compliance): add CWEs verification for sast analysis

[kaysavps]

This enables verification of the non-existence of CWES in the SAST analysis.

refs #2792

Before merging, the CWES policy group must be enabled in the Chainloop Platform.

[cubic-dev-ai]

No issues found across 1 file

[jiparis]

Before merging, the CWES policy group must be enabled in the Chainloop Platform.
I've put this PR in draft until this is resolved, to prevent accidental merge.

[cubic-dev-ai]

No issues found across 1 file

_{Requires human review: This change modifies CI/CD contract configuration and introduces new compliance requirements (CWEs), which is a high-impact infrastructure/policy change requiring human review.}

[kaysavps]

CWEs policy group is already enabled in Chainloop Platform. Moving it to ready to merge.

[cubic-dev-ai]

No issues found across 1 file

_{Requires human review: Modifies CI/CD workflow contracts and security policy configurations, which requires verification of external platform state (cwes policy group).}